A. General Information
1. Name and Address of the Controller
The Controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection provisions, is:
**Jonas Lütjen**
Würzburger Straße 10
28215 Bremen
Email: Hello@BeforeYouDie.games
2. Legal Basis for Data Processing
We process the personal data of our users only to the extent necessary to provide a functional website, as well as our content and services. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR (Legitimate Interest).
B. Data Processing in Detail
1. Provision of the Website and Server Log Files (Hosting)
**Hosting Services:** Cloudflare Pages and Cloudflare R2
- **Scope of Processing:** With every visit to our website, our hosting provider, Cloudflare Inc., automatically collects data and information in so-called server log files. This includes: IP address of the requesting computer, name of the accessed file/page, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, and the previously visited page (referrer URL).
- **Purpose:** Processing serves to ensure the security and stability of the service (e.g., defense against hacker attacks) and to optimize website speed.
- **Legal Basis:** Art. 6 (1) lit. f GDPR (Legitimate interest in a secure and high-performing operation).
- **Data Transfer USA:** Cloudflare is a US company. In the course of use, data may be transmitted to the USA. We rely here on the EU-U.S. Data Privacy Framework (DPF) and the Standard Contractual Clauses (SCCs) concluded by Cloudflare.
2. The Godot Games and Checklist Function
**Basic Data Collection:** Our Godot games **do not** collect any personal data from users (such as names, email addresses, or location) and **do not use cookies** for tracking.
- **Client-side Storage (Checklist):** The status of the checklist (which games have been marked as "checked off") is stored **exclusively locally in the user's browser** via `localStorage`.
- **Scope:** This data (e.g., `spiel_1_abgehakt=true`) is anonymous, is **not** transmitted to our server or third parties, and serves solely the user's comfort function.
- **Deletion:** The user can delete this data at any time by clearing the browser cache/local storage themselves.
3. Dynamic Integration of Google Fonts
We use Google Fonts to display our website in a visually appealing manner. The fonts are **dynamically** reloaded from a Google server in the USA when the page is accessed.
- **Scope of Processing:** By accessing the font files, the user's **IP address** is transmitted to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google can thereby determine from which IP address our online offering was accessed.
- **Legal Basis:** Art. 6 (1) lit. f GDPR (Legitimate interest in the visual optimization and design of the website).
- **Data Transfer USA:** It cannot be ruled out that Google transfers data to the USA. Google is subject to the EU-U.S. Data Privacy Framework.
4. Contact via Email and Contact Form
There is a possibility to contact us on our website via the provided email address or via the contact form.
- **Scope of Processing:** The personal data transmitted by you, in particular your email address, name (if provided), and the content of your message.
- **Purpose:** The processing of the data you provide serves exclusively to process your inquiry or concern and to communicate with you.
-
**Legal Basis:**
- If your inquiry aims at concluding a contract (e.g., a cooperation request), the legal basis is Art. 6 (1) lit. b GDPR (steps prior to entering into a contract).
- In all other cases (e.g., general questions), the legal basis is Art. 6 (1) lit. f GDPR (Legitimate interest in answering user inquiries).
- **Storage Period:** The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent via email or the contact form, this is generally the case when the conversation with the user has ended and no statutory retention obligations prevent deletion.
If we use an external service provider (a so-called Form Backend) for the contact form to process and forward emails, this provider will be named separately on the website. In this case, data such as the IP address and the form data may be transmitted to this service provider. The legal basis for this is Art. 6 (1) lit. f GDPR (Legitimate interest in a stable reception system).
C. Your Rights as a Data Subject
If your personal data is processed, you are entitled to the following rights:
- **Right of Access** (Art. 15 GDPR)
- **Right to Rectification** (Art. 16 GDPR)
- **Right to Erasure** (Art. 17 GDPR)
- **Right to Restriction of Processing** (Art. 18 GDPR)
- **Right to Object** (Art. 21 GDPR)
- **Right to Data Portability** (Art. 20 GDPR)
- **Right to Lodge a Complaint with a Supervisory Authority** (Art. 77 GDPR)
The supervisory authority responsible for us is:
**The State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen**
Georgstraße 122-124
27570 Bremerhaven
D. Validity and Topicality
This Privacy Policy is currently valid and has the status **October 2025**. Due to the further development of our website or changes in legal requirements, it may become necessary to adapt this policy.